diff --git a/gradle/build.versions.toml b/gradle/build.versions.toml
index 2a96feb9e3bd0..6fcad72762714 100644
--- a/gradle/build.versions.toml
+++ b/gradle/build.versions.toml
@@ -50,5 +50,5 @@ wiremock = "com.github.tomakehurst:wiremock-jre8-standalone:2.23.2"
xmlunit-core = "org.xmlunit:xmlunit-core:2.8.2"
[plugins]
-ospackage = { id = "com.netflix.nebula.ospackage-base", version = "11.11.2" }
+ospackage = { id = "com.netflix.nebula.ospackage-base", version = "12.1.0" }
nmcp-aggregation = { id = "com.gradleup.nmcp.aggregation", version.ref="nmcp" }
diff --git a/gradle/verification-metadata.xml b/gradle/verification-metadata.xml
index 0a687f0d7e6b1..6ec97379e0616 100644
--- a/gradle/verification-metadata.xml
+++ b/gradle/verification-metadata.xml
@@ -479,6 +479,11 @@
+
+
+
+
+
@@ -956,9 +961,9 @@
-
-
-
+
+
+
@@ -1391,6 +1396,11 @@
+
+
+
+
+
@@ -2033,6 +2043,11 @@
+
+
+
+
+
@@ -3096,6 +3111,11 @@
+
+
+
+
+
@@ -3499,6 +3519,11 @@
+
+
+
+
+
@@ -3524,11 +3549,21 @@
+
+
+
+
+
+
+
+
+
+
@@ -4704,6 +4739,11 @@
+
+
+
+
+
diff --git a/x-pack/plugin/ml/build.gradle b/x-pack/plugin/ml/build.gradle
index db87c27d30d21..6b08ab7e84038 100644
--- a/x-pack/plugin/ml/build.gradle
+++ b/x-pack/plugin/ml/build.gradle
@@ -51,6 +51,14 @@ esplugin.bundleSpec.from {
configurations.nativeBundle.files.collect { zipTree(it) }
}
+// this is required due to https://github.com/nebula-plugins/gradle-ospackage-plugin/issues/472
+// those lib files should not be executable in the first place
+esplugin.bundleSpec.filesMatching("platform/**/lib/*") { details ->
+ details.permissions {
+ unix(0644)
+ }
+}
+
// We don't ship the individual nativeBundle licenses - instead
// they get combined into the top level NOTICES file we ship
esplugin.bundleSpec.exclude 'platform/licenses/**'